mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-14 05:49:57 +00:00
Code Issues Projects Releases Wiki Activity
Files
0901bb4c6a315a48a0fcb49a51e0ff6547e37087
meta-openembedded/meta-networking/recipes-protocols
T
History
Narpat Mali 0901bb4c6a frr: Fix CVE-2023-38802 and CVE-2023-41358 
CVE-2023-38802:
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote
attacker to cause a denial of service via a crafted BGP update with a
corrupted attribute 23 (Tunnel Encapsulation).

CVE-2023-41358:
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c
processes NLRIs if the attribute length is zero.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-38802
https://nvd.nist.gov/vuln/detail/CVE-2023-41358

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-09-06 09:12:30 -04:00
..
babeld
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
dante
Convert to new override syntax
2021-08-03 10:21:25 -07:00
freediameter
Convert to new override syntax
2021-08-03 10:21:25 -07:00
frr
frr: Fix CVE-2023-38802 and CVE-2023-41358
2023-09-06 09:12:30 -04:00
mdns
mdns: use git fetcher
2023-03-05 07:44:28 -05:00
net-snmp
net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer Exception
2023-01-25 08:36:39 -05:00
nopoll
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
openflow
openflow: ignore unrelated CVEs
2022-07-18 07:02:41 -07:00
openl2tp
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
openlldp
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
pptp-linux
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
quagga
quagga: ignore CVE-2016-4049
2022-07-18 06:58:49 -07:00
radiusclient-ng
Convert to new override syntax
2021-08-03 10:21:25 -07:00
rp-pppoe
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
tsocks
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
usrsctp
usrsctp: add CVE_VERSION to correctly check for CVEs
2022-07-18 06:54:50 -07:00
xl2tpd
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
zeroconf
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00